CVE-2019-3558: facebook facebook thrift Excessive Iteration

EPSS trend

Probability

2.02%

Chance of exploitation in the next 30 days

Percentile

81%

Versus all other CVEs

30-day change

0.00 pp

From 2.02% on 20-09-2026

20-09-202620-10-2026

EPSS score

2.02%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

6 links

github.com/facebook/fbthrift/commit/c5d6e07588cd03061bc54d451a7fa6e84883d62bX Refsource MISCREPORTFIXPatchThird Party Advisory
www.facebook.com/security/advisories/cve-2019-3558X Refsource MISCREPORTAdvisoryVendor Advisory
www.securityfocus.com/bid/108274VDB EntryX Refsource BIDWEBBroken Link
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
ubuntu.com/security/CVE-2019-3558REPORT
www.cve.org/CVERecord?id=CVE-2019-3558REPORT

Related vulnerabilities

CVE-2021-24028chainguardthrift+31.75%5y ago13-04-2021 23:20An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00.CVE-2024-45863facebookfacebook thrift0.35%2y ago27-09-2024 13:50A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.CVE-2024-45773facebookfacebook thrift0.48%2y ago27-09-2024 13:49A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00.CVE-2019-11939chainguardthrift+51.56%6y ago18-03-2020 00:40Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00.CVE-2019-11938chainguardthrift+32.25%6y ago10-03-2020 20:30Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.12.09.00.CVE-2019-3564chainguardthrift+51.99%7y ago06-05-2019 15:15Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.03.04.00.

All vulnerabilities infacebook thrift thrift

CVE-2019-3558: facebook facebook thrift Excessive Iteration

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References